We’re delighted to share the August 2022 replace for Invicti Enterprise On-Demand. The highlights of this launch are the Enterprise Logic Recorder, Azure Key Vault, and improved notification scope.
Enterprise Logic Recorder
Invicti has launched the Enterprise Logic Recorder (BLR) that can assist you maximize scan protection and detect vulnerabilities even in utility and website parts which are solely accessible by particular enterprise logic flows.
The BLR works by recording any customized or advanced enterprise logic on each your goal net functions and your multi-step varieties with a number of validation guidelines. The crawler then makes use of these recordings to find extra pages, varieties, and endpoints as a part of the scan.
For extra data, see our help web page on utilizing the Enterprise Logic Recorder.
Azure Key Vault
Because the zero-trust method continues to realize in reputation, we need to guarantee you will have loads of choices to guard your secrets and techniques. That’s why we’ve launched integration with one more secrets and techniques administration service: Azure Key Vault.
Azure Key Vault is a cloud service that lets you retailer and entry your secrets and techniques in a safe manner. Azure safeguards these secrets and techniques utilizing industry-standard algorithms, key lengths, and {hardware} safety modules.
By integrating Invicti Enterprise with Azure Key Vault, you’ll be able to run authenticated scans in your net functions, web sites, and APIs with out having to enter or alternate delicate credentials.
For extra data, see our help web page on integrating Invicti Enterprise with Azure Key Vault.
Improved notification scope
You possibly can create notifications in Invicti Enterprise to remain knowledgeable about scans launched or failed and points recognized. Nevertheless, for these notifications to offer the in-the-moment data your group wants, you have to guarantee the precise messages attain the precise individuals. We’re excited to announce enhancements to the methods you’ll be able to outline web site scope and person scope for notifications. This improved performance lets you outline the notification recipients for particular web sites and web site teams.
Notification scope additionally performs a crucial function in integration endpoints, significantly 2-way integrations comparable to Jira. For instance, if you wish to create a notification for integration, you have to choose Any Consumer. Equally, if Any Web site and Any Consumer is chosen, notifications will likely be despatched out for all web sites on the account, no matter whether or not the person has entry to that web site.
For extra data, see our help web page on creating notifications.
For a whole checklist of what’s new, improved, and stuck on this replace, consult with the Invicti Enterprise Changelog.
